<!--
  This file is a part of the open-eBackup project.
  This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0.
  If a copy of the MPL was not distributed with this file, You can obtain one at
  http://mozilla.org/MPL/2.0/.
  
  Copyright (c) [2024] Huawei Technologies Co.,Ltd.
  
  THIS SOFTWARE IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OF ANY KIND,
  EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO NON-INFRINGEMENT,
  MERCHANTABILITY OR FIT FOR A PARTICULAR PURPOSE.
  -->

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<!--
  This file is a part of the open-eBackup project.
  This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0.
  If a copy of the MPL was not distributed with this file, You can obtain one at
  http://mozilla.org/MPL/2.0/.
  
  Copyright (c) [2024] Huawei Technologies Co.,Ltd.
  
  THIS SOFTWARE IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OF ANY KIND,
  EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO NON-INFRINGEMENT,
  MERCHANTABILITY OR FIT FOR A PARTICULAR PURPOSE.
  -->

<!--
  This file is a part of the open-eBackup project.
  This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0.
  If a copy of the MPL was not distributed with this file, You can obtain one at
  http://mozilla.org/MPL/2.0/.
  
  Copyright (c) [2024] Huawei Technologies Co.,Ltd.
  
  THIS SOFTWARE IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OF ANY KIND,
  EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO NON-INFRINGEMENT,
  MERCHANTABILITY OR FIT FOR A PARTICULAR PURPOSE.
  -->

<!--
  This file is a part of the open-eBackup project.
  This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0.
  If a copy of the MPL was not distributed with this file, You can obtain one at
  http://mozilla.org/MPL/2.0/.
  
  Copyright (c) [2024] Huawei Technologies Co.,Ltd.
  
  THIS SOFTWARE IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OF ANY KIND,
  EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO NON-INFRINGEMENT,
  MERCHANTABILITY OR FIT FOR A PARTICULAR PURPOSE.
  -->

<html lang="zh-cn" xml:lang="zh-cn">
 <head>
  <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
  <meta http-equiv="X-UA-Compatible" content="IE=edge">
  <meta name="DC.Type" content="topic">
  <meta name="DC.Title" content="步骤2：获取证书">
  <meta name="product" content="">
  <meta name="DC.Relation" scheme="URI" content="zh-cn_topic_0000001792503690.html">
  <meta name="prodname" content="">
  <meta name="version" content="">
  <meta name="brand" content="30-OceanProtect 备份一体机 1.5.0-1.6.0 帮助中心">
  <meta name="DC.Publisher" content="20240320">
  <meta name="DC.Format" content="XHTML">
  <meta name="DC.Identifier" content="ZH-CN_TOPIC_0000001792503666">
  <meta name="DC.Language" content="zh-cn">
  <link rel="stylesheet" type="text/css" href="public_sys-resources/commonltr.css">
  <title>步骤2：获取证书</title>
 </head>
 <body style="clear:both; padding-left:10px; padding-top:5px; padding-right:5px; padding-bottom:5px">
  <a name="ZH-CN_TOPIC_0000001792503666"></a><a name="ZH-CN_TOPIC_0000001792503666"></a>
  <h1 class="topictitle1">步骤2：获取证书</h1>
  <div>
   <p>注册OpenStack受保护环境时，可以在<span>本产品</span>导入OpenStack CA证书，提升设备之间访问的安全性，否则系统将无法验证其所访问设备的信息，安全性存在风险。该操作为可选操作。您可以向管理员获取，或者自行下载。本节介绍自行下载证书的方法。</p>
   <div class="section">
    <h4 class="sectiontitle">操作步骤</h4>
    <ol>
     <li><span>使用Chrome浏览器，在地址栏输入KeyStone V3地址，按回车。</span><p></p><p>KeyStone V3地址的获取方法可参考<a href="zh-cn_topic_0000001839143137.html">备份前准备</a>。</p> <p>如：https://identity.az236.dc236.huawei.com:443/identity/v3</p> <p></p></li>
     <li><span>单击<span style="color:#494949;">URL输入栏左侧</span>的“不安全”，单击“证书无效”。</span><p></p><p id="ZH-CN_TOPIC_0000001792503666__zh-cn_topic_0000001839194665_p1399812277507">不同浏览器提示方式不同，此处以Google Chrome 120为例进行说明。</p> <p id="ZH-CN_TOPIC_0000001792503666__zh-cn_topic_0000001839194665_p119981827105014"><span><img id="ZH-CN_TOPIC_0000001792503666__zh-cn_topic_0000001839194665_image1113891214519" src="zh-cn_image_0000001792395600.png"></span></p> <p></p></li>
     <li><span>在弹出的对话框中，选择“基本信息”页签，查看证书安全算法等级。</span><p></p><p>由于只有SHA-256及以上安全等级的算法才能通过<span>本产品</span>的校验，因此如果证书安全等级不满足要求，可联系管理员获取该证书。如果满足要求，则继续执行<a href="#ZH-CN_TOPIC_0000001792503666__li598391412101">4</a>。</p> <p><span><img src="zh-cn_image_0000001929752165.png"></span></p> <p></p></li>
     <li id="ZH-CN_TOPIC_0000001792503666__li598391412101"><a name="ZH-CN_TOPIC_0000001792503666__li598391412101"></a><a name="li598391412101"></a><span>选择“详细信息”页签，在“证书层次结构”区域选中最高层级的证书名，单击“导出”。</span></li>
     <li><span>根据向导提示，导出证书并重命名证书文件为<em>XXX</em>.pem。重命名方法如下：</span><p></p>
      <ol type="a">
       <li>将证书文件上传至代理主机的临时目录下，以下步骤以上传路径“/tmp”为例说明。</li>
       <li>依此执行以下命令，将证书文件转换为.pem格式（“XXX.crt”为转换前的证书文件名，“XXX.pem”为转换后的证书文件名）：<pre class="screen">cd /tmp/</pre> <pre class="screen">openssl x509 -in <em>XXX</em><em>.crt</em> -out <em>XXX</em><em>.pem</em></pre></li>
       <li>下载转换为.pem格式的证书文件。
        <div class="note">
         <img src="public_sys-resources/note_3.0-zh-cn.png"><span class="notetitle"> </span>
         <div class="notebody">
          <p>在<span>本产品</span>上注册OpenStack，证书格式必须为.pem格式。</p>
         </div>
        </div></li>
      </ol> <p></p></li>
    </ol>
   </div>
  </div>
  <div>
   <div class="familylinks">
    <div class="parentlink">
     <strong>父主题：</strong> <a href="zh-cn_topic_0000001792503690.html">备份OpenStack云服务器</a>
    </div>
   </div>
  </div>
 </body>
</html>